6 matches found
CVE-2026-108927
The itsourcecode Baptism Information Management System 1.0 is vulnerable to SQL injection due to improper handling of the b_id argument in the pbaptism.php file. This weakness can be triggered remotely. Public exploits for this vulnerability are available and have been reported as sighted in the ...
EUVD-2026-97827
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...
CVE-2026-108927: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...
CVE-2024-2597: Improper Neutralization of Input During Web Page Generation
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailschoolperson.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a...
CVE-2024-2595: Improper Neutralization of Input During Web Page Generation
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailkhetperson.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a...
CVE-2024-2593: Improper Neutralization of Input During Web Page Generation
Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/modules/book/main/bookdetailgroup.php, in the 'bid' parameter. This vulnerability could allow a remote attacker to send a special...